ExploitHub – Telegram

ExploitHub

6.39K subscribers

18 photos

1 video

15 files

348 links

Download Telegram

About

Blog

Apps

Platform

6.39K subscribers

https://github.com/toniblyx/my-arsenal-of-aws-security-tools

GitHub - toniblyx/my-arsenal-of-aws-security-tools: List of open source tools for AWS security: defensive, offensive, auditing…

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc. - toniblyx/my-arsenal-of-aws-security-tools

3.5K views15:31

“Different Approaches of Reconnaissance — Bug Bounty’s” by z0id https://link.medium.com/S37uiGOhs3

Different Approaches of Reconnaissance — Bug Bounty’s

I’m going to show you different approaches to recon for your bug bounty Journeys.

3.5K views18:07

Cross-Site Websocket Hijacking bug in Facebook that leads to account takeover

https://ysamm.com/?p=363

3.5K viewsedited 05:23

https://medium.com/@pratiky054/html-injection-unique-exploitation-a5c3d4e6fed8

HTML Injection(Unique Exploitation)

Hey Guys! I know HTML injection is not something you wanted to read but however its an unique issue which i have found.

2.9K views14:49

“CORS Misconfiguration leading to Private Information Disclosure” by Virus0X01 https://link.medium.com/YcYvPruny3

CORS Misconfiguration leading to Private Information Disclosure

Hi hackers, today i will talk about CORS that i found in a private program

2.9K views15:51

All Kali Linux Commands.pdf

A-Z Kali Linux Commands Pdf

4.5K viewsedited 15:54

A collection of UNIX hacking tips & tricks
https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet

GitHub - hackerschoice/thc-tips-tricks-hacks-cheat-sheet: Various tips & tricks

Various tips & tricks. Contribute to hackerschoice/thc-tips-tricks-hacks-cheat-sheet development by creating an account on GitHub.

2.9K viewsedited 16:10

https://github.com/sehno/Bug-bounty/blob/master/bugbounty_checklist.md

checklist

Bug-bounty/bugbounty_checklist.md at master · sehno/Bug-bounty

Ressources for bug bounty hunting. Contribute to sehno/Bug-bounty development by creating an account on GitHub.

2.7K views03:27

https://medium.com/bugbountywriteup/reflected-dom-xss-and-clickjacking-on-https-silvergoldbull-de-bt-html-daa36bdf7bf0

Reflected DOM XSS and CLICKJACKING on https://silvergoldbull.de/bt.html

While doing spidering on silvergoldbull site I noticed a strange request to https://silvergoldbull.de/bt.html with following request:

2.7K views03:33

https://www.sitepoint.com/really-good-introduction-xml/

A Really, Really, Really Good Introduction to XML — SitePoint

Learn about the basics of XML files - their use, structure, and styling. Most of the information you'll need to know about XML.

2.8K views03:46

HTML to PDF converter bug leads to RCE in Facebook server.

https://ysamm.com/?p=280

2.9K views03:50

https://santuysec.com/2020/01/21/google-bug-bounty-csrf-in-learndigital-withgoogle-com/

2.6K views23:42

https://hipotermia.pw/bb/http-desync-account-takeover

hipotermia - Account takeover via HTTP Request Smuggling

A bug chain of HTTP Request Smuggling that led to account takeover

2.7K views00:10

https://medium.com/@iSecMax/%D1%81ookie-based-xss-exploitation-2300-bug-bounty-story-9bc532ffa564?_branch_match_id=749211653187847497

Сookie-based XSS exploitation | $2300 Bug Bounty story

For quite a long time I have been hunting for vulnerabilities on the HackerOne platform, allocating a certain amount of time outside the…

2.8K views00:13

“Two-factor authentication security testing and possible bypasses” by Max https://link.medium.com/vWnWo4H6A3

Two-factor authentication security testing and possible bypasses

Before I began to comprehend the complex science of information security, it seemed to me that Two-Factor Authentication is a guaranteed…

3.0K views00:13

https://github.com/xdavidhu/awesome-google-vrp-writeups/blob/master/README.md

awesome-google-vrp-writeups/README.md at master · xdavidhu/awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program - xdavidhu/awesome-google-vrp-writeups

2.9K views18:03

Test your #XSS skill here:

1. https://t.co/LRISg28WYh
2. https://t.co/tw5iOs1Cwq
3. https://t.co/3vCo8e9HPW
4. https://t.co/c3ecrOgshi
5. https://t.co/TRNBKgxqTX
6. https://t.co/c9ahLQYZHF
7. https://t.co/vqEmUeH4s7
8. https://t.co/clxpJBg6o9
9. https://t.co/BeaW8VizzA

Welcome to the XSS Challenge Wiki! Contribute to cure53/XSSChallengeWiki development by creating an account on GitHub.

3.4K views02:07

Reflect XSS in JS File on Subdomain (redacted.redacted.com)
https://medium.com/@eissen5c/reflect-xss-on-js-file-in-subdomain-fe017a843f5e

Reflect XSS on JS File in Subdomain

2.5K views17:29

A Less Known Attack Vector, Second Order IDOR Attacks
https://medium.com/@ozguralp/a-less-known-attack-vector-second-order-idor-attacks-14468009781a

A Less Known Attack Vector, Second Order IDOR Attacks

Most of you probably familiar within the vulnerability types “IDOR (Insecure Object Direct Reference)” and second order vulnerabilities…

2.5K views17:29

Tesla hacking competition: $1 million and free car if someone can hijack Model 3
https://ift.tt/2tYuw5V

Submitted January 14, 2020 at 12:06AM by ahackercalled4chan
via reddit https://ift.tt/30jxmyQ

Tesla hacking competition offers $1 million and free car if someone can hijack Model 3

Some Model 3 cars and $1 million in award money will be up for grabs.In March last year, a group of hackers won a Tesla Model 3 and $35,000 for hacking into its systems

2.5K views18:33

[CVE-2019-14615] iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU
https://ift.tt/2NJ6XVK

Submitted January 26, 2020 at 07:06PM by digicat
via reddit https://ift.tt/2NZGmUI

GitHub - HE-Wenjian/iGPU-Leak: [CVE-2019-14615] iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU

[CVE-2019-14615] iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU - HE-Wenjian/iGPU-Leak

2.5K views18:36